Overview
- Federal prosecutors and the FBI announced on Wednesday that they obtained a court order and seized multiple internet domains hard‑coded into two hacking platforms, QScan and QTRouter, which authorities say rendered both platforms inoperable.
- Unsealed court filings tie the platforms to a group called QTFY and employees of Nanjing Xinjiuwei Network Technology Company, and say the tools were offered as a service to customers that included China’s Ministry of State Security and the People’s Liberation Army.
- According to the filings, QScan scanned for and automatically infected thousands of internet‑connected devices worldwide and QTRouter routed malicious traffic through those compromised devices and commercial proxies to hide attack origins.
- The Justice Department named victims including NASA, the Department of Justice, the Federal Reserve, the U.S. Senate, Energy and health agencies, and court documents list private targets such as hospitals, power companies and defense contractors; authorities have not publicly quantified data loss or damage.
- The FBI and NSA published technical indicators to help defenders and officials framed the action as part of a broader campaign to impose costs on state‑sponsored cyber operations, while Beijing has rejected the U.S. allegations and questions remain about what investigators will disclose next.